Data protection notice for customers

What we do with your personal data.

This Data Protection Notice ("Notice") sets out the basis on which INWORLDWIDE PTE. LTD. (UEN 202554940E) ("we", "us" or "our") may collect, use, disclose or otherwise process personal data of our customers in accordance with the Personal Data Protection Act 2012 ("PDPA"). It applies to personal data in our possession or under our control, including personal data held by organisations we have engaged to collect, use, disclose or process personal data for our purposes. Our employees: see our privacy notice for employees.

Personal data

In this Notice, "customer" means an individual who (a) has contacted us through any means to find out more about any goods or services we provide, or (b) may, or has, entered into a contract with us for the supply of any goods or services by us. "Personal data" means data, whether true or not, about a customer who can be identified from that data, or from that data and other information to which we have or are likely to have access. Other terms have the meanings given to them in the PDPA.

Depending on the nature of your interaction with us, examples of personal data we may collect from you include your name, job title, company name, business email address, telephone number, and any information you include in messages to us. The contact form on this site asks for your name, work email, company, the service you need and your message.

Collection, use and disclosure

We generally do not collect your personal data unless (a) it is provided to us voluntarily by you directly, or by a third party you have authorised to disclose it to us (your "authorised representative"), after you or your authorised representative have been notified of the purposes for which it is collected and have consented to its collection and use for those purposes; or (b) collection and use without consent is permitted or required by the PDPA or other laws. On this site, you give consent by ticking the box on the contact form before you send it. We will seek your consent before collecting any additional personal data, and before using your personal data for a purpose that has not been notified to you, except where permitted or authorised by law.

We may collect and use your personal data for any or all of the following purposes:

We may disclose your personal data:

Messages sent through the contact form reach us by email. The form uses Cloudflare Turnstile to tell people from automated programs: Turnstile checks your browser when you send the form, and the message passes through Cloudflare's network on its way to us.

The purposes above may continue to apply after your relationship with us (for example, under a contract) has ended or changed, for a reasonable period afterwards, including, where applicable, a period that lets us enforce our rights under a contract with you.

Withdrawing your consent

The consent you give for the collection, use and disclosure of your personal data remains valid until you withdraw it in writing. You may withdraw consent, and ask us to stop collecting, using and/or disclosing your personal data for any or all of the purposes above, by writing or emailing to our Data Protection Officer at the contact details below.

When we receive your written request, we may need reasonable time, depending on its complexity and its impact on our relationship with you, to process it and to tell you the consequences of acting on it, including any legal consequences that may affect your rights and liabilities to us. In general, we will process your request within ten (10) business days of receiving it.

Depending on the nature and scope of your request, we may not be able to continue providing our goods or services to you; if so, we will tell you before we finish processing your request. If you decide to cancel your withdrawal of consent, please tell us in writing in the same way. Withdrawing consent does not affect our right to continue to collect, use and disclose personal data where doing so without consent is permitted or required under applicable laws.

Access to and correction of personal data

If you wish to make (a) an access request for a copy of the personal data we hold about you, or for information about the ways we use or disclose it, or (b) a correction request to correct or update any of your personal data we hold, you may submit your request in writing or by email to our Data Protection Officer at the contact details below.

A reasonable fee may be charged for an access request. If so, we will tell you the fee before processing your request.

We will respond to your request as soon as reasonably possible. If we cannot respond within thirty (30) days of receiving it, we will tell you in writing within those thirty (30) days when we will be able to respond. If we are unable to provide any personal data or make a correction you have requested, we will generally tell you why, except where we are not required to under the PDPA.

Protection of personal data

To safeguard your personal data from unauthorised access, collection, use, disclosure, copying, modification, disposal or similar risks, we have introduced appropriate administrative, physical and technical measures such as minimised collection of personal data, authentication and access controls (such as good password practices and need-to-know access to personal data), two-factor authentication to secure access to our systems, encryption of data by our cloud service providers, and regular updates of operating systems and other software.

No method of transmission over the Internet or method of electronic storage is completely secure. While security cannot be guaranteed, we strive to protect your information and keep reviewing and improving our information security measures.

Accuracy of personal data

We generally rely on personal data provided by you or your authorised representative. To keep your personal data current, complete and accurate, please tell our Data Protection Officer in writing or by email at the contact details below if it changes.

Retention of personal data

We may retain your personal data for as long as it is necessary to fulfil the purpose for which it was collected, or as required or permitted by applicable laws. We will stop retaining your personal data, or remove the means by which it can be associated with you, as soon as it is reasonable to assume that keeping it no longer serves the purpose for which it was collected and is no longer necessary for legal or business purposes.

Transfers outside Singapore

Some of our service providers (including email, website hosting and artificial intelligence service providers) process or store personal data outside Singapore, including in the United States. Where your personal data is transferred outside Singapore, we will take steps to ensure that it continues to receive a standard of protection at least comparable to that provided under the PDPA, for example by ensuring that the recipient is bound by legally enforceable obligations such as contractual terms.

Data Protection Officer

You may contact our Data Protection Officer with any enquiries or feedback on our personal data protection policies and procedures, or to make any request:

Effect of this Notice and changes to it

This Notice applies together with any other notices, contractual clauses and consent clauses that apply to our collection, use and disclosure of your personal data. We may revise this Notice from time to time without prior notice. You can tell whether it has changed by checking the date it was last updated below. Your continued use of our services constitutes your acknowledgement and acceptance of such changes.

Effective date: 3 November 2026. Last updated: 3 November 2026.